Unknown · Modern-Async · CVE-2021-41167
**Name of the Vulnerable Software and Affected Versions**
modern-async versions prior to 1.0.4
**Description**
The issue affects two functions in the modern-async library: `forEachSeries` and `forEachLimit`. These functions are supposed to limit the concurrency of certain actions, but they do not. As a result, any code that calls these functions may be written with the expectation of limited concurrency, but this expectation will not be met. This could potentially lead to security issues in other projects.
**Recommendations**
For versions prior to 1.0.4, upgrade to version 1.0.4 to resolve the issue.
As a temporary workaround, consider avoiding the use of `forEachSeries` and `forEachLimit` functions until the issue is resolved.